file[.]exe | Triage™

General

Target
file.exe
Size 341KB
Sample221204-a56xqscc32
SHA256 da0edf61eff7df8f02f42eab1d0eab82780ea30b316e0550371296c35bb86e3a
MD5 aee27ffd2b413cbb2c5e0517edaac274
SHA1 8ad9efecba357cff845b287ff7e1ab3047b21088
SHA512 581bbd4d0a3b3bcf0e759f11bd7883616a917b6dc1ada6ea358a1a79916bcafa5d7f0e3a19167793f792d3d67c84f69e3186265787a1233c463e1d0e2b99d7a4
SSDEEP 6144:sYohe/lJSAjHVzyZy+jsv7k9wrVBnMW2RqnIuC0iBY:sYohIXtHVzUy++g21MW3IuCBY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH 232a88a68cd6cc5c1194cb5ecddf784e
SHA256 da0edf61eff7df8f02f42eab1d0eab82780ea30b316e0550371296c35bb86e3a
MD5 aee27ffd2b413cbb2c5e0517edaac274
SHA1 8ad9efecba357cff845b287ff7e1ab3047b21088
SHA512 581bbd4d0a3b3bcf0e759f11bd7883616a917b6dc1ada6ea358a1a79916bcafa5d7f0e3a19167793f792d3d67c84f69e3186265787a1233c463e1d0e2b99d7a4
SSDEEP 6144:sYohe/lJSAjHVzyZy+jsv7k9wrVBnMW2RqnIuC0iBY:sYohIXtHVzUy++g21MW3IuCBY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetFullPathNameW GetVolumePathNameA SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing